EU sets out strategy for AI cyber defence

The European Commission has introduced an Action Plan on Cybersecurity and Artificial Intelligence to strengthen Europe’s response to cyber risks linked to AI. The plan is designed to help member states, businesses and public authorities use AI safely while addressing threats created by advanced AI models.

EU officials said AI can improve vulnerability detection, prevent cyberattacks and help protect critical infrastructure, but warned that malicious actors can use the same technology to automate attacks, find weaknesses and conduct cyber operations faster and at greater scale. The plan focuses on promoting responsible use of advanced AI, reinforcing cybersecurity and resilience, and expanding Europe’s AI capabilities for cyber defence.

The Commission plans to strengthen evaluation of AI models before they reach the EU market, in line with the AI Act, and work with ENISA on a European Blueprint for secure access to advanced AI systems for cybersecurity. A secure testing platform will support critical sectors including energy, transport, health, finance and public administration, while an EU Grand Challenge on AI for cybersecurity will encourage new AI-powered security tools.